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We consider graph games of infinite duration with winning conditions in parameterized linear tem- 
poral logic, where the temporal operators are equipped with variables for time bounds. In model 
checking such specifications were introduced as "PLTL" by Alur et al. and (in a different version 
called "PROMPT-LTL") by Kupferman et al.. 

We present an algorithm to determine optimal variable valuations that allow a player to win a 
game. Furthermore, we show how to determine whether a player wins a game with respect to some, 
infinitely many, or all valuations. All our algorithms run in doubly-exponential time; so, adding 
bounded temporal operators does not increase the complexity compared to solving plain LTL games. 

1 Introduction 

Many of todays problems in computer science are no longer concerned with programs that transform 
data and then terminate, but with non-terminating systems. Model-checking, the automated verification 
of closed systems (those that do not have to interact with an environment), is nowadays routinely per- 
formed in industrial settings. For open system (those that have to interact with a possibly antagonistic 
environment), the framework of infinite two-player games is a powerful and flexible tool to verify and 
synthesize such systems. A crucial aspect of automated verification is the choice of a specification for- 
malism, which should be simple enough to be used by practitioners without formal training in automata 
theory or logics. Here, Linear Temporal Logic (LTL) has turned out to be an expressive, but easy to use 
formalism: its advantages include a compact, variable-free syntax and intuitive semantics. For example, 
the specification "every request q is answered by a response p" is expressed by (p = G{q Fp). 

However, LTL lacks capabilities to express timing constraints, e.g., it cannot express that every re- 
quest is answered within an unknown, but fixed number of steps. Also, in an infinite game with winning 
condition (p, Player might have two winning strategies, one that answers every request within m steps, 
and another one that takes n steps, for some n > m. The first strategy is clearly preferable to the second 
one, but there is no guarantee that the first one is indeed computed, when the game is solved. 

To overcome these shortcomings, several parameterized temporal logics lH] |4j where introduced 
for the verification of closed systems: here one adds parametric bounds on the temporal operators. We 
are mainly concerned with Parametric Linear Temporal Logic (PLTL) 1 1 1, which adds the operators ¥<x 
and G<y to LTL. In PLTL, the request-response specification is expressed by G(^ — ?■ ¥<xP), stating that 
every request is answered within the next x steps, where x is a variable. Hence, satisfaction of a formula 
is defined with respect to a variable valuation a mapping variables to natural numbers: F<^<p holds, if <p 
is satisfied within the next a{x) steps, while G<y(p holds, if (p is satisfied for the next a{y) steps. 

The model-checking problem for a parameterized temporal logic is typically no harder than the 
model-checking problem for the unparameterized fragment, e.g., deciding whether a transition system 

*The author's work was supported by the project Games for Analysis and Synthesis of Interactive Computational Systems 
( GASICS) of the European Science Foundation. 

Giovanna D' Agostino, Salvatore La Torre (Eds.): 

Proceedings of the Second International Symposium on 

"Games, Automata, Logics and Formal Verification" (GandALF 201 1) 

EPTCS 54, 2011, pp. 146-[T6n doi: 10.4204/EP TCS.54.1II 



M. Zimmermann 



\A1 



satisfies a PLTL formula with respect to some, infinitely many, or all variable valuations is PSPACE- 
complete fT], as is LTL model-checking fTSl. Similar results hold for parameterized real-time logics |@]. 
Also, for PLTL one can determine optimal variable valuations for which a formula is satisfied by a given 
transition system in polynomial space. 

In this work, we consider infinite games with winning conditions in PLTL, i.e., we lift the results on 
model-checking parameterized specifications to synthesis of open systems from parameterized specifica- 
tions. Our starting point is a result on the fragment of PLTL containing only parameterized eventualities, 
which was discussed (in a different version called PROMPT-LTL) in [6|: there, the authors show that 
the realizability problem (an abstract notion of a game) for PROMPT-LTL is 2EXPTIME-complete. We 
use this result to solve infinite games with winning conditions in the full logic with parameterized even- 
tualities and always': determining whether a player wins a PLTL game with respect to some, infinitely 
many, or all variable valuations is also 2EXPTIME-complete, as is determining the winner of an LTL 
game ifTTI . So, we observe the same phenomenon as in model-checking: the addition of parameterized 
operators does not increase the computational complexity of the problem. 

After establishing these results, we consider the problem of finding optimal variable valuations that 
allow a given player to win the game. If a winning condition contains only parameterized eventualities or 
only parameterized always', then it makes sense to ask for an optimal valuation that a player can enforce 
against her opponent and for a winning strategy realizing the optimum. Our main theorem states that this 
optimization problem can be solved in doubly-exponential time; so even determining an optimal winning 
strategy for such a game is of the same computational complexity as solving unparameterized games. 

The remainder of this paper is structured as follows: in Section [2l we introduce infinite games with 
winning conditions in parameterized linear temporal logic and fix our notation. In Section |3l we show 
how the result on the PROMPT-LTL realizability problem can be used to show that determining whether 
a player wins a PLTL game with respect to some, infinitely many, or all variable valuations can be decided 
in doubly-exponential time. In SectionlH we use these results to determine optimal winning strategies in 
games for which a notion of optimality can be defined. Finally, Section|5] gives a short conclusion. 

2 Definitions 

The set of non-negative integers is denoted by N, the set of positive integers by N+. The powerset of a 
set S is denoted by 2^ . Throughout this paper let P be a set of atomic propositions. 

Automata. An (non-deterministic) ^-automaton 21 = Qo,-^! Acc) consists of a finite set of 
states Q, an alphabet £, a set of initial states Qq Q Q, transition relation A C 2 x Z x 2, and an 
acceptance condition Acc. An G)-automaton is deterministic, if |2o| = 1 and for every {q,a) € 2 x £, 
there is exactly one q' such that {q,a,q') E A. In this case, we denote Qq = {qo} by and A as function 
5: Q xL ^ Q. The size of 21, denoted by |2l|, is the cardinality of Q. A run of 21 on an ft)-word w G 
is an infinite sequence of states qoqiqi ■ • ■ such that qo G Qo and {qn,Wn,qn+\) S A for every n G N. We 
consider different acceptance conditions Acc for G)-automata: (1) Biichi automata with a set of accepting 
states F CQ. A run qoqiqi • • • is accepting if there are infinitely many n such that g„ € F. (2) Generalized 
Biichi automata with a family of sets of accepting states ^ C 2^. A run qoqiqi • • • is accepting if for 
every F € there are infinitely many n such that q^ ^ F. (3) Parity automata with a priority function 
c : 2 — > N. A run qoqiqi • • • is accepting, if the minimal priority seen infinitely often is even. An G)-word 
is accepted by an w-automaton, if there exists an accepting run on it. The language L(2l) of 21 contains 
the OJ-words accepted by 21. An co-automaton is called unambiguous, if it has at most one accepting 
run on every ft)-word w E Z®. It is called non-confluent, if for every ft)-word w and two runs qoqiqi ■ ■ ■ 
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and ^o^'i<?2 • • • on w we have for all n that if <7„ = q'^, then q,„ = q'^ for every m <n. In a non-confluent 
w-automaton with n states, every finite prefix of an ft)-word has at most n finite runs, all of which can 
be uniquely identified by their last state. Finally, a state of an G)-automaton is unproductive, if it is not 
reachable from the initial state or if there is no accepting run starting from this state. Removing all 
unproductive states from a (generalized) Bilchi or parity automaton does not change its language. 

Remark 1. An unambiguous (generalized) Biichi or parity automaton without unproductive states is 
non-confluent. 

Linear Temporal Logics. Let ^ and '3^ be two disjoint sets of variable^ The formulae of Para- 
metric Linear Temporal Logic (PLTL) |]T| are given by the grammar 

(p::=p\^p\ (p ^(p\ (py (p\ Xcp I (pUcp \ (pRcp \ F<^^(p \ G<y(p , 

where p ^ P, x ^ ^ and y ^ "3^. Also, we use the derived operators tt:= p\/ ^p and ff :=p A -ip for 
some fixed p ^ P, F<p:=ttU(p, and G(p:=fflR(p|l. The set of variables occurring in (p is denoted by 
var(9) and defined in the obvious way. The size of a formula cp is measured by counting the distinct 
subformulae of (p. We consider several fragments of PLTL: cp is an LTL formula, if var((p) = 0; (p is a 
PROMPT-LTL formula [6J, if var{(p) is a subset of of cardinality at most one; (p is a PLTLp formula, 
if var(<p) C ^ ; and 9 is a PLTLq formula, if var(<p) C ^. A formula in PLTLf or PLTLg is called 
unipolar. The semantics of PLTL is defined with respect to an ft)- word w S (2^) a position / € N, and 
a variable valuation a : ^ WS^ — > N as follows: 

• (w, /, a) 1= p iff 7? G Wi and (w, /, a) \= ^piff p ^ Wi, 

• (w, /, a) 1= (p A V/" iff (w, i,a) \= cp and (w, /, a) \= y, 

• (w, i,a) \= (p^Y iff (m^) o;) \= (p or (w, /, a) \= y, 

• (w, /, a) \= Xcp iff (w, / + 1 , a) \= (p, 

• (w, i, a) \= (pVY iff there exists a j > such that (w, / + j, a) |= i/^ and (w, / + / , a) \= (p for all / 
in the range < / < j, 

• (w, /, a) \= (pKY iff for all j > 0: either (w, / + j, a) \=Y or there exists a / in the range < / < j 
such that {w,i + j',a) \= (p, 

• {w,i,a) \= F<v(j!) iff there exists a j in the range < j < a(x) such that (w, / + j,a) \= (p, and 

• {w,i,a) \= G<y(p iff for all j in the range < 7 < a{y): {w,i + j,a) \= (p. 

As the satisfaction of an LTL formula (p is independent of the variable valuation a, we omit a and write 
(w,/) ^ (p instead of (w,/,a) ^ (p. PLTL and LTL (but not the fragments PROMPT-LTL, PLTLp and 
PLTLg) are closed under negation, although we only allow formulae in negation normal form. This is 
due to the duality of U and R, and F<v and G<y. Thus, we use as shorthand for the equivalent formula 
obtained by pushing the negation to the atomic propositions. Note that the negation of a PLTLp formula 
is a PLTLg formula and vice versa. 

Remark 2. For every PLTL formula (p and every valuation a, there exists an LTL formula (pa such that 
for every w G (2^) and every i € N.' (w, /, a) \= (p if and only if (w, /) \= (pa- 

'if the sets of variables are not disjoint, already the model-checking problem for PLTL is undecidable (}]. 

^In 1 1 1, the authors also introduced the operators U<^-, R<j, F>y, G>.v, U>y, and R>.f. However, they showed that all these 
operators can be expressed using and G<y only, at the cost of a linear increase of the formula's size. Also, we ignore 
constant bounds as they do not add expressiveness. 
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This can be shown by replacing the parameterized operators by disjunctions or conjunctions of nested 
next-operators. The size of (pa grows linearly in L?£var((p) OJ(z)- Due to Remark |2l we do not consider a 
fixed variable valuation when defining games with winning conditions in PLTL, but ask whether Player 
can win a game with winning condition <p with respect to some, infinitely many, or all valuations. 

Infinite Games. An (initialized and labeled) arena .S2f = (V, Vq , Vi , £ , vq , ^) consists of a finite directed 
graph iy,E), a partition {Vq, Vi} of V denoting the positions of Player and Player 1, an initial vertex 
vo G V , and a labeling function I: V . The size of si^ is \V\. It is assumed that every vertex has 
at least one outgoing edge. A play p = P0P1P2 ... is an infinite path starting in vq. The trace of p is ?(p) = 
^(po)^(pi)^(p2) .... A strategy for Player / is a mapping a : V*Vi V such that (p„, a(po . . . p„)) G E 
for all po...p„^ V*Vi. A play p is consistent with a if p„+i = a(po . . . p„) for all n with p„ G Vj. 

A parity game W = {£/,c) consists of an arena £/ and a priority function c: V ^N. Player wins 
a play poPiPi • • • if the minimal priority seen infinitely often is even. The number of priorities of is 
|c(y ) |. A strategy a for Player / is winning for her, if every play that is consistent with a is won by her. 
Then, we say Player / wins ^. 

A PLTL game ^ = {£/, (p) consists of an arena and a PLTL formula (p. Player wins a play p 
with respect to a variable valuation a if (?(p),0, a) \= (p, otherwise Player 1 wins p with respect to a. A 
strategy for Player / is a winning strategy for her with respect to a if every play that is consistent with a is 
won by Player / with respect to a. Then, we say that Player / wins ?f with respect to a. We define the set 

of winning valuations for Player / in = {£/, (p) by = {a \ Player / wins §^ with respect to a}. 
Here (and from now on) we assume that a's domain is restricted to the variables occurring in (p. LTL, 
PROMPT-LTL, PLTLp, PLTLg, and unipolar games are defined by restricting the winning conditions to 
LTL, PLTLp, PLTLg, and unipolar formulae. Again, winning an LTL game is independent of a, hence 
we are justified to say that Player / wins an LTL game. 

Strategies with Memory. A memory structure ^ = (M,mo,upd) for an arena {V,Vo,Vi,E,vo,£) 
consists of a finite set M of memory states, an initial memory state mo G M, and an update function 
upd : M X V — > M, which can be extended to upd* : — yMby upd*(po) — mq and upd*(po . . -PnPn+i) — 
upd(upd* (po . . . Pn), Pfi+i )■ A next-move function for Player / is a function nxt : V, x M — )• V that satisfies 
(v, nxt(v, m)) G for all v G Vj and all m G M. It induces a strategy a with memory ^ via a(po ■ ■ - Pn) = 
nxt (p„ , upd* (po . . . p„ ) ) . A strategy is called finite-state if it can be implemented with a memory structure, 
and positional if it can be implemented with a single memory state. The size of ^ (and, slightly abusive, 
<7) is |M|. An arena and a memory structure ^ = (M, mo, upd) for induce the expanded arena 
^ X ^ = (y xM, Vo xM, Vi xM,E',{so,mo),£j^x^) where {{s,m),{s' ,m')) eE'if and only if {s,s') G 
E and upd{m,s') = m' , and ls/xj^{s,m) = l{s). A game ^ with arena =2/ is reducible to with arena 
s^' via written ?f , if si' = x ^ and every play (po,»io)(Pi)'Wi)(p2,m2) ... in is won 

by the player who wins the projected play pQp\p2. ■ ■ va.'^ . 

Remark li. If <^ and Player i has a positional winning strategy for 'S' , then she also has a 
finite-state winning strategy with memory ^ for ^. 

A parity game or a PLTL game (with respect to a fixed variable valuation) cannot be won by both 
players. On the other hand, is determined, if one of the players wins it. 
Proposition 4. 

1. Parity games are determined with positional strategies 01 [70|/ and the winner can he determined 
in time G{m{nl d) 1^^/^^ ) [5 /, where n, m, and d denote the number of vertices, edges, and priorities. 

2. LTL games (and therefore also PLTL games with respect to a fixed variable valuation) are de- 
termined with finite-state strategies. Determining the winner is l^XPTlME-complete H12\l and 
finite-state winning strategies can be computed in doubly-exponential time. 
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3 Solving Prompt and PLTL Games 

In this section, we consider several decision problems for PLTL games. Kupferman et al. solved the 
PROMPT-LTL realizability problemlby a reduction to the LTL realizability problem ||6], which is com- 
plete for doubly-exponential time. We show that this result suffices to prove that even the decision prob- 
lems for the full logic with non-uniform bounds and parameterized always-operators are in 2EXPTIME. 
For games with winning conditions in PLTL we are interested in the following decision problems: 

Membership: Given a PLTL game i G {0, 1}, and a valuation a, does a G hold? 
Emptiness: Given a PLTL game ^ and / G {0, 1}, is #^ empty? 
Finiteness: Given a PLTL game 5^ and / G {0, 1}, is ^ finite? 

Universality: Given a PLTL game and / G {0, 1}, does #^ contain all variable valuations? 

Our first result is a simple consequence of Remark |2]and Proposition I4I2I 

Theorem 5. The membership problem for PLTL games is decidable. 

The realizability problem for PROMPT-LTL is known to be 2EXPTIME -complete. The proof of this 
result can easily be adapted to graph-based PROMPT-LTL games as considered here. 

Theorem 6 ([6]). The emptiness problem for PROMPT-LTL games is IWs.VTlM'E-complete. 

The adapted proof in terms of graph-based games can be found in lfT4l and is sketched in the next 
section (see Lemma[T3l). It proceeds by a reduction to solving LTL games: given a PROMPT-LTL game 
^ = (i2/,<p) one constructs an LTL game ^' = (=6/',<p') with \£^'\ G and \(p'\ G such 

that W§ i^%if and only if Player wins . This proof yields the following corollary, which will be 
crucial when we determine optimal strategies in the next section: let /(«) = 2^"'"^'' g 2^''^'"'. 

Corollary 7 (IHl). Let ^ = {s^ , cp) be a PROMPT-LTL game with var((p) = {x}. If / 0, then 
Player also has a finite-state winning strategy for 'i§ of size 2|i2/|/(|(p|) which is winning with respect 
to the valuation x i— > 2(|i2/| -/(l^l) + 1). 

To solve the other decision problems for games with winning conditions in full PLTL, we make use 
of the duality of unipolar games and the duality of the emptiness and universality problem. For an arena 
si = (VjVcVijfjVo,^), let si :=(V,Vi, VbjfjVo,^) be its dual arena, where the two players swap their 
positions. Given a PLTL game §f = (=2/, <p), the dual game is ^ :=(=e/, -■(?)). The dual game of a PLTLg 
game is a PLTLp game and vice versa. It is easy to see that Player / wins ^ with respect to a if and only 
if Player 1 — / wins ^ with respect to a. The sets 'W^ enjoy two types of dualities, which we rely on in 
the following. The first one is due to determinacy of LTL games, the second one due to duality. 

Lemma 8. Let be a PLTL game. 

1. is the complement of "W^ . 

2. W^ = W^-'. 

Another useful property is the monotonicity of the parameterized operators: let a{x) < p{x) and 
oc{y) > P{y)- Then, {w,i,a) \= F<x(p implies (w,/,j8) \= F<v<p and {w,i,a) \= G<y(p implies (w,/,j8) |= 
G<y(p. Hence, the set is upwards-closed if is a PLTLp game, and downwards-closed if ^ is a 
PLTLg game (valuations are compared componentwise). Now, we prove the main result of this section. 

Theorem 9, The emptiness, finiteness, and universality problems for PLTL games are 2EXPTIME- 
complete. 

^An abstract game without underlying arena in which two players alternatingly pick letters from 2^. The first player wins if 
the ft)-word produced by the players satisfies the winning condition <p. 
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Proof. Let = {s^ , (p). Due to Lemma [8|2l it suffices to consider / = 0. 

Emptiness of W^: Let (pp be tlie formula obtained from cp by inductively replacing every subformula 
G<vV^ by i/A, and let :={£/, cp^). Note that is a PLTLp game. Applying downwards-closure, we 
obtain that is empty if and only if #^ is empty. 

The latter problem can be decided by a reduction to PROMPT-LTL games. Fix a variable x G J^T 
and let (p' be the formula obtained from cpp by replacing every variable z in i/a by x. Then, / if and 
only if ^ 0, where = {£/, tp'). The latter problem can be decided in doubly-exponential time by 
Theorem [6] Since we have \(p'\ < |<p|, the emptiness of can be decided in doubly-exponential time. 

Universality of W^: Applying both statements of Lemma [8] we get that is universal if and only 
if = if and only if = 0. The latter is decidable in doubly-exponential time, as shown above. 

Finiteness of If q) contains at least one F<v, then is infinite, if and only if it is non- 
empty, due to monotonicity of F<v. The emptiness of can be decided in doubly-exponential time as 
discussed above. Otherwise, ^ is a PLTLg game whose finiteness problem can be decided in doubly- 
exponential time by a reduction to the universality problem for a (simpler) PLTLg game. We assume 
that (p has at least one parameterized temporal operator, since the problem is trivial otherwise. The set 

is infinite if and only if there is a variable y € var((p) that is mapped to infinitely many values by 
the valuations in W^. By downwards-closure we can assume that all other variables are mapped to zero. 
Furthermore, y is mapped to infinitely many values if and only if it is mapped to all possible values, again 
by downwards-closure. To combine this, we define q)y to be the formula obtained from q) by inductively 
replacing every subformula G<,Y for z ^ 3^ by y and define '^y:={£/ ,(py). Then, is infinite, if 
and only if there exists some variable y G var(<p) such that is universal. So, deciding whether 
is infinite can be done in doubly-exponential time by solving [var(<p)| many universality problems for 
PLTLg games, which were discussed above. 

Finally, hardness follows directly from 2EXPTIME-hardness of solving LTL games. □ 

4 Optimal Winning Strategies for unipolar PLTL Games 

For unipolar games, it is natural to view synthesis of winning strategies as an optimization problem: 
which is the best variable valuation a such that Player can win with respect to a? We consider two 
quahty measures for a valuation a for q): the maximal parameter max,gyar((p) and the minimal 
parameter minjgvjyf^) For a PLTLf game. Player tries to minimize the waiting times. Hence, 

we are interested in minimizing the minimal or maximal parameter. Dually, for PLTLg games, we are 
interested in maximizing the quality measures. The dual problems, i.e., maximizing the waiting times 
in a PLTLf game and minimizing the satisfaction time in a PLTLg game, are trivial due to upwards- 
respectively downwards- closure of the set of winning valuations. Again, we only consider Player as 
one can dualize the game to obtain similar results for Player 1 . The main result of this section states that 
all these optimization problems are not harder than solving LTL games. 

Theorem 10. Let = {s^f, (jPf) be a PLTLp game and = (Pg) be a PLTLg game. Then, the 
following values (and winning strategies realizing them) can be computed in doubly-exponential time. 

1. min„g^o min,gyar((pF)«W- 

2- min„e^o^max,evar((pF)aW- 

3. max^^^o maXj,,gvai.(ipj,) 

a{y). 
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We begin the proof by showing that all four problems can be reduced to the optimization problem for 
PROMPT-LTL games: let ^ = {^Z, (p) be a PROMPT-LTL game with var(<p) = {x} C JT. The goal is 
to determine min^^;^ a{x). 

The latter three reductions are simple applications of the monotonicity of the parameterized opera- 
tors, while the first one requires substantial work. 

[T]) For each x E var((p), we replace eventualities parameterized by z 7^ by an unparameterized 
formula, thereby constructing the projection of to the values of x. However, we cannot just re- 
move the parameters from an eventuality, as we have to ensure that the waiting times are still bounded 
by some unknown, but fixed value. This is achieved by applying the alternating-color technique for 
PROMPT-LTL 0. 

Let p ^ Pbe a fixed proposition. An co-word w' = Wqw[w'2 ■ ■ ■ £ (l^^^''^) is a /^-coloring of w = 
W0W1W2 . • . G (2^)'*' if w'„riP = Wn, i.e., w„ and w'„ coincide on all propositions in P. The additional 
proposition p can be thought of as the color of wj,: we say that a position n is green if p £ w'„, and say 
that it is red if p ^w'„. Given ^ G N we say that w' is ^-spaced, if the colors in w' change infinitely often, 
but not twice in any infix of length k. Dually, w' is /c-bounded, if the colors change at least once in every 
infix of length k+l. 

The formula altp:=GFp AGF^p is satisfied if the colors change infinitely often. Given a PLTL 
formula 9 andX C var{q)), let q)x denote the formula obtained by inductively replacing every subformula 
¥<xV with X ^Xby {p ^ {plJ{^plJ\j/))) A {^p — > (-■pU(/7Ui//'))). Finally, consider the formula (px A 
alt p. It forces a coloring to have infinitely many color changes and every subformula F<x¥ with x 
to be satisfied within one color change. We have var{(px) = X and \ (px\ € ^{\(p\). 

For a variable valuation a and a subset X of a's domain, we denote the restriction of a to X by a^x- 

Lemma 11 (|6|). Let (p be a PLTL formula, X C var{(p), and let w £ (2^)'". 

1. If (w,0,a) \= (p, then (w' ,0,aix) \= (px Aaltpfor every k-spaced p-coloring w' of w, where k = 
maXrevar(9)\xaW- 

2. Let € N. Ifw' is a k-bounded p-coloring ofw with (^',0,0;) \= (px> then (w,0,j8) \= (p where 
a{x) ifxeX, 
2k else. 



Hix) 



The previous lemma shows how replace (on suitable p-colorings) a parameterized eventuality by an 
LTL formula, while still ensuring a bound on the satisfaction of the parameterized eventuality. To apply 
the alternating-color technique, we have to transform the original arena £/ into an arena £/' in which 
Player produces /^-colorings of the plays of the original arena, i.e., £/' will consist of two disjoint 
copies of £/, one labeled with p, the other one not. Assume a play is in vertex v in one component. 
Then, the player whose turn it is at v chooses a successor v' of v and Player picks a component. The 
play then continues in this component's vertex v'. We split this into two sequential moves: first, the 
player whose turn it is chooses a successor and then Player chooses the component. Thus, we have to 
introduce a new vertex for every edge of £/ which allows Player to choose the component. Formally, 
given an arena £/ = (V, Vq, Vi vo,£), define the expanded arena £/' :={V' ,Vq,VI,E' ,Vq,£') by 

• V' = V x{0,\}UE, 

• Vo' = Vox{0,l}U£, 

• Vl = Vix{0,\}, 

. E' = {{{v,0),e),{{v,\),e),{e,{v',0)),{e,{v',l))\e={vy)eE}, 
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(vo,0), 



• l'{e) = for all e G £ and f (v,ft) 



l{v)\j{p] ifb = 0, 
£{v) ifb=l. 



£/' is bipartite with partition {V x {0, 1 },£'}, so a play has the form (po,^o)^o(Pi (P2,^2) • • • where 
P0P1P2 ... is a play in £/, e„ = (p„,p„+i), and the b„ are in {0, 1}. Also, we have G 

Finally, this construction necessitates a modification of the semantics of the game: only every other 
vertex is significant when it comes to determining the winner of a play in the choice vertices 
have to be ignored. This motivates blinking semantics for PLTL games. Let = {£/, (p) be a PLTL 
game and p = P0P1P2 ... be a play. Player wins p with respect to a under blinking semantics, if 
(^(PoP2P4 • • OjO, a) \= (p. Analogously, Player 1 wins p with respect to a under blinking semantics if 
(^(PoP2P4 • • OiO, a) ^ (p. The notions of winning strategies and winning with respect to a under 
blinking semantics are defined in the obvious way. 

Remark 12. PLTL games with respect to a fixed variable valuation under blinking semantics are deter- 
mined with finite-state strategies. 

Now, we can state the connection between a PLTLp game (iz/, (p) and its counterpart in .s^' with 
blinking semantics. The proof relies on the existence of finite-state winning strategies which necessarily 
produce only ^-bounded plays for some fixed k, since altp is part of the winning condition. 

Lemma 13. Let (iz/, (p) be a PLTLf game andX C var((p). 

1. Let a : var((p) — > N fte a variable valuation. If Player i wins (is/, (jo) with respect to a, then she 
wins (=2^', ipx /\altp) with respect to a^x under blinking semantics. 

2. Let a: X ^'N be a variable valuation. If Player i wins (£/',(px A altp) with respect to a under 
blinking semantics, then there exists a variable valuation j8 with I5{x) = a (x) for every x G X such 
that she wins (£/, (p) with respect to j8. 

Applying the lemma to our problem, we have 
min min a{x) = min min{a(x) | Player wins (jz/', A a/fp) w.r.t. a u. blinking semantics} . 

aG5^;cevar((p) xevar((p) 

Since (pj^j = {x}, we have reduced the minimization problem to |var((p)| many PROMPT-LTL opti- 
mization problems, albeit under blinking semantics. However, the proof presented in the following can 
easily be adapted to deal with blinking semantics. 

[2]) This problem can directly be reduced to a PROMPT-LTL optimization problem: let (p^ be the 
PROMPT-LTL formula obtained from (p^ by renaming each x G var((pF) to z and let :={£/p,(p^). 
Then, min^^^o^ T^^\xevai{tpp) = ^^"^ae^", ^i^)' ^'^ upwards-closure of 

[3]) For every y G var(9G) let <Py be obtained from (pa by replacing every subformula G<^Y for z^y 
by Y and let % :=(Mi, %■)■ Then, we have max^^^^^ max,,evar{<pr.) «(3') = T^^h-e^M{q>c,) max^g;^^ a{y), 
due to downwards-closure of ^^J^ ■ Hence, we have reduced the original problem to |var(<pG) I maximiza- 
tion problems for a PLTLg game with a single variable, which are discussed below. 

IH) Let <Pq be obtained from <Pg by renaming every variable in cpQ to z and let = {£/q,(Pq). Then, 
max^^^o min-,,£vaj.(|j^) a{y) = max^^^o^ o:(z)> again due to downwards-closure of Again, we have 
reduced the original problem to a maximization problem for a PLTLg game with a single variable. 

To finish the reductions we translate a PLTLg optimization problem with a single variable into a 
PROMPT-LTL optimization problem: let ?f = (=c/,<p) be a PLTLg game with vai-((p) = {y} C ^. 
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Then, we have max^^p-o a{y) = max^^g^ a{y) = min^^^^ a{y) + l, due to the closure properties and 

Lemmalll As is a PROMPT-LTL game, we achieved our goal. 

All reductions increase the size of the arena at most quadratically and the size of the winning 
condition at most linearly. Furthermore, to minimize the minimal parameter value in a PLTLp game 
and to maximize the maximal parameter value in a PLTLg game, we have to solve |var((p)| many 
PROMPT-LTL optimization problems (for the other two problems just one) to solve the original unipo- 
lar optimization problem with winning condition (p. Thus, it suffices to show that a PROMPT-LTL 
optimization problem can be solved in doubly-exponential time. 

So, let 5^ = (i/, <p) be a PROMPT-LTL game with var(<p) = {x}. then Corollary |7]yields 

min^^^oa{x)< /c :=2([i2/[ -/([(pi) + 1) e •2^^'"''". Let a„ be the valuation mapping x to «. To 
determine min^^^j) a{x), it suffices to find the smallest n <k such that a„ G As the number of such 
valuations a„ is equal to k, it suffices to show that a„ € can be decided in doubly-exponential time 
in the size of ^, provided that n < k. This is achieved by a game reduction to a parity game. 

Fix a valuation a and remember that (pa is an LTL formula (see Remark Now, observe that 
a deterministic parity automaton *p = {Q,2^ ,qo,5,c) with L{^) = {w G (2^)'" | (^,0) \= (pa} can be 
turned into a memory structure ^ = {Q,qQ,upd) for {£/,(pa) by defining upd(^,v) = 5{q,£{v)). Then, 
we have {£/,(pa) <jt, x ^,c'), where c'iy^q) = c{q). Hence, the Remarks |2] and [3] yield a € if 
and only if Player wins {.s^ x ^ ,c'). 

Lemma 14. Let a be a variable valuation and (pbe a PROMPT-LTL /ormM/a with var((p) = {x}. There 
exists a deterministic parity automaton *P recognizing the language {w G (2^)® | (^,0) \= (Pa} such that 
m G 22"""" . {a{x) + 1)2"*""' and^has 2^(l'Pl) many colors. 

For a valuation a„ with A:, we have \^\ € 22""-"''^""' with 2^(^^\^ many colors. Thus, Propo- 
sition |4lT] implies that (=e/ X ^,c') can be solved in doubly-exponential time in the size of which 
suffices to prove Theorem [TO] as we have to solve at most doubly-exponentially many parity gamefl 
each of which can be solved in doubly-exponential time. Thus, it remains to prove Lemma [141 

Furthermore, we have seen that the automaton *p for the minimal On can easily be turned into a finite- 
state winning strategy for W realizing rmn^^^o a{x). To obtain a winning strategy for the general case 
of an PLTLp (respectively PLTLg) game it is necessary to construct a deterministic parity automaton 
for the PLTLp formula (p (respectively -i(p) as described below. In case of a PLTLg game, we need to 
complement the automaton, which is achieved by incrementing the priority of each state by one. 

We construct an automaton as required in Lemma [14] in the remainder of this section. Note that 
the naive approach of constructing a deterministic parity automaton for the LTL formula (pa„ yields an 
automaton that recognizes the desired language, but is of quadruply-exponential size, if n is close to k. 
The problem arises from the fact that (pa„ uses a disjunction of nested next-operators of depth n to be able 
to count up to n. This (doubly-exponential) counter is hardwired into the formula (pa„ and thus leads to 
a quadruply-exponential blowup when turning (pa„ into a deterministic parity automaton, since turning 
LTL formulae into deterministic parity automata necessarily incurs a doubly-exponential blowup [7 |. 

To obtain our results, we decouple the counter from the formula by relaxing parameterized eventual- 
ities to plain eventualities. We translate the relaxed formula into a generalized Biichi automaton, which 
is then turned in a Biichi automaton. By placing an additional constraint on accepting runs we take care 
of the bound on the (now relaxed) parameterized operators. As these automata are unambiguous, we 
also end up with a non-confluent Biichi automaton, which is then determinized into a parity automaton. 
Only then, the additional constraint is added to the parity automaton in the form of a counter that tracks 

^This can be improved to exponentially many by binary search. 
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(and aborts, if the counter is overrun) different runs of the Biichi automaton. This way, we obtain an 
automaton that is equivalent to the (unrelaxed) PROMPT-LTL formula with respect to a„. To add these 
counters, it is crucial to have a non-confluent Biichi automaton, as such an automaton has at most \Q\ 
runs which have to be tracked by the counter. 

In the following we extend known constructions for translating an LTL formula into a non-deter- 
ministic Biichi automaton and for translating a non-deterministic Biichi automaton into a deterministic 
parity automaton. In the first step we have to deal with the additional constraints, which do not appear in 
the classical translation problem. In the second step, we have to simulate these constraints with the states 
of the parity automaton, which requires changes to this translation as well. Since our proof technique 
can deal with several parameters, we consider the more general case of a PLTLf formula instead of a 
PROMPT-LTL formula. 

From PLTLp to generalized Biichi Automata. We begin by constructing a generalized Biichi automaton 
from a PLTLp formula using a slight adaptation of a standard textbook method (see lH). We ignore the 
parameters when defining the transition relation, i.e., we treat a parameterized eventually as a plain 
eventually. The bounds are taken care of by additional constraints on accepting runs. 

Given a PLTLp formula (p we define its closure cl((p) to be the set of subformulae of <p. A set 
5 C cl((p) is consistent, if the following properties are satisfied: 

• 7? G B if and only if -.p ^ B for every p^P. • Y2 ^ ^ implies Yi^Yi ^ B. 

• V^i A 1/^2 G S if and only if v^i G B and Xj/i^B. • Vi,V2^B imphes \lfi^¥2 G B. 

• v/i V 1/^2 G B if and only if v^i G B or v/2 G B. • V^i G 5 implies F<xYi € B. 
The set of consistent subsets is denoted by '^((p) C 2'^"-''''. 

Construction 15. Given a PLTLp formula (p, we define the generalized Biichi automaton 

. Q = '^((p) and Qo = {B G ^(<p) | <p G B}, 

• {B,a,B') G A if and only if 

- BnP = a, 

- Xl/Ai G B if and only if^i € B', 

- Yi^Vi £ B if and only if\l/2^Bor(Yi^B and Yi^V2 ^ B'), 

- Yi-^¥2 ^ B if and only ifY2^B and (Yi ^ B or Yi^¥2 ^ B'), and 

- F<xYi G B if and only ifYi G B or F<xYi ^ B'. 

• ^ = U U ^F< where 

- ^xj = {FyiV<i/2 I V^iUv^2 e cl((p)} with F^iUv^j = {B e 'if (9) | \lfi^Y2 ^ B or Y2 ^ B}, 

- ^R = {i^v'iRV2 I ¥i'R¥2 G cl((p)} with = {B G 'if (9) | Yi'^¥2 €BorY2^ B}, and 

- ^F< = {^F<,v/i I ^<x¥i e cl(<p)} with Ff<,v/i = {B G "^((p) I F<_,Yi ^Bor\j/i€ B}. 

Lemma 16. Let (p G PLTLf cind let 2l,p be defined as in Construction [75] 

1. (w,0, a)\= (p if and only if^cp has an accepting run p onw such that each Ff<,.||,, G ^f< i^ visited 
at least once in every infix of p of length a{x) + 1. 

2. 2l,j) is unambiguous. 

3. |2l^| <2l'Pl and\^\ < \(p\. 
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Proof. [T]) Let {w,0,a) \= (p. For each n define B„ = {\\r ^ cl((p) | {w,n,a) \= \\r} and show that p = 
BqB\B2 ... is an accepting run of 2lip such that each /^f<,i//i £ =^F< is visited at least once in every infix of 
p of length a{x) + \. The semantics of PLTL guarantee that each B„ is consistent, Bo G Qq follows from 
(w,0,a) \= (p, and (B„,w„,B„+i) € A for every « is due to the semantics of PLTL. Thus, the sequence 
BqB\B2 ... is a run. Assume that some visited only finitely often, i.e., there exists an index n 

such that for every n' >nwe have {w,n', a) \= Yi^Yi and {w,n' ,a) ^ Y2- This contradicts the semantics 
of the until-operator, which guarantee a position m>n such that {w,m,a) \= Y2, if {w,n,a) \= Yi^W2- 
Now, assume that some Fx|,^s.^,^ is visited only finitely often, i.e., there exists an index n such that for 
every n' >n snq have {w,n' ,a) ^ V^iR'/'2 and {w,n' ,a) \= Y2- This contradicts the semantics of the 
release-operator, which state {w,n,a) \= \l/i^V2, if ¥2 holds at every position n' > n. Finally, assume 
that some fF<,v/i G =^F< is not visited in an infix of B0B1B2 ... of length a(x) + 1, i.e., there is some 
index n such that {w,n,a) \= F<xYi and {w,n + j,a) ^ Yi for every j in the range < 7 < a{x). This 
contradicts the semantics of the parameterized eventually, which guarantee the existence of an index k 
in the range < ^ < a(;t:) such that (w,?i + ^,a) \=Yy- Hence, BqB\B2--- is an accepting run such that 
each i^F<,v'i ^ =^f< i^ visited at least once in every infix of BqB\B2 ... of length a{x) + 1. 

For the other direction, let p = Bo^i^2 ... be an accepting run of 2t,p on w such that each Fp^^^, G 
=^F< is visited at least once in every infix of p of length a(x) + 1. A structural induction over (p shows 
that i/A € B„ if and only if (w,«, a) \= y/. This suffices, since we have (p € Bq. 

|2]) Let e{(p) be the formula obtained from (p G PLTLf by replacing every parameterized eventually 
¥<x by an eventually F. The automata S2l^ and '^e{(p) are isomorphic. Thus, it suffices to show that 2lg(^) 
is unambiguous. So, assume there are two accepting runs BqB\B2 ■ ■ ■ and B[^B[B'.y ... on an cu-word w 
and let n be an index such that B„ / B',, i.e., there exists y £ el(e((p)) such that (w.l.o.g.) y ^ but 
i/A ^ Bjj. In[T]), we have shown that we have y £ B„ (respectively y £ ^1) if and only if {w,n) \= y 
(note that y is an LTL formula, hence we do not need to care about a variable valuation). Thus, we have 
{w,n) \= Y (due to y ^ B„) and ^ V'^ (due to y ^ B'J, which yields the desired contradiction. 

0) Clear. □ 

From generalized Biichi Automata to Biichi Automata. Now, we use a standard construction (see Q) 
to turn a generalized Biichi automaton 21 = {Q,L,Qo,A,{Fi,...,Fk}) into a Biichi automaton 21' = 
2q, A',F') while preserving its language (even under the additional constraints) and its unambi- 
guity. The state set of 21' is 2 x {0, 1, ... ,^}, where the first component is used to simulate the behavior 
of 21, while the second component is used to ensure that every set Fj is visited infinitely often. 

Lemma 17. Let 21 = Qo,A, {Fi ,.. . ,Fk}) be a generalized Biichi automaton. There exists a Biichi 
automaton 21' with state set Q x {0, \ . .. ,k} such that the following holds: 

1. Let ^ = for some PhThp formula ^ as in Construction [771 Then, {w,0,(x) \= (p if and only if 
2t' has an accepting run {go,io)i^i,h)i^2,i2) ■■■ on w such that each Fp^^.^^j G is visited at 
least once in every infix ofqoq\q2 ■ ■ ■ of length a{x) + 1. 

2. 21' is unambiguous, if^ is unambiguous. 

3. |2l'| = |2l|-(A:+l) 

From Biichi Automata to Deterministic Parity Automata. Now, we have to determinize an unam- 
biguous (and therefore non-confluent) Biichi automaton while incorporating the additional constraints 
on accepting runs. Abstractly, we are given a non-confluent Biichi automaton 21 and a finite set of tu- 
ples {Fj,bj) G 2^ X N+ and are only interested in runs p that visit a state from Fj in every infix of p of 
length bj, while visiting the accepting states of the Biichi automaton infinitely often. Remember that a 
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non-confluent automaton has at most \Q\ finite runs on a finite word wq • • • w„, which can be uniquely 
identified by their last state. Furthermore, for every last state q of such a run, there is a unique state p 
such that p is the last state of a run of the automaton on wo • • • w„- 1 and {p,Wn,q) G A. Thus, to check 
the additional constraints on the runs, we can use counters d{q,j) to abort the run ending in ^ if it did 
not visit Fj for bj consecutive states. The state space of the deterministic automaton we construct is the 
cartesian product of the state space of *p and the counters d{q,j) for every q and j, where is a deter- 
ministic automaton recognizing the language of 21 without additional constraints. To prove Theorem [TO] 
we want to use the deterministic automaton with counters as memory structure in a game reduction, 
which imposes additional requirements on its size and its acceptance condition. 

The Biichi automaton we need to determinize is already of exponential size. Hence, we can spend 
another exponential for determinization, which is the typical complexity of a determinization procedure 
for Biichi automata. However, we have to carefully choose the acceptance condition of the deterministic 
automaton we construct: to prove the main theorem, we need an acceptance condition Acc such that a 
game with arena £/ x ^ and winning condition Acc can be solved in doubly-exponential time, even 
if ^ is already of doubly-exponential size. Furthermore, it is desirable to use a condition Acc that 
guarantees Player positional winning strategies: in this case, ^ implements a finite-state winning 
strategy for her in the original PLTLp game. 

The parity condition satisfies all our requirements. Thus, we adapt a determinization construc- 
tion 111191 tailored for non-confluent Biichi automata yielding a parity automaton. The automata obtained 
by this construction are slightly larger than the ones obtained by optimal constructions, but still small 
enough to satisfy our requirements on them. Another advantage of this construction is the fact that it 
is conceptually simpler than the constructions for arbitrary Biichi automata based on trees labeled with 
state sets. Nevertheless, it is possible to use another determinization construction, as long as it satisfies 
the requirements in terms of size and winning condition described above. 

Given a transition relation A C g x £ x 2, define A{S,a) = {q' € Q \ {q,a,q') G A for some q G S}. 

Construction 18 (|9|). Given a non-confluent Biichi automaton 21 = 2o)A,f ) and a finite set 
{{Fi,b\) , . . . ,{Fji,bk)^ C 2^ X N+ construct the deterministic parity automaton ^ = (2',r,^o, 5,c) as 
follows: let n= \Q\ and define 

• e' = {((5o,mo),...,(5„,m„),^/) |5,C(2,m,-G{0,l}, J: {\, . . . ,k} ^n\J {!.} with d{qj) < 
bj ord{q,j) = _L}, 

• qo= ((5o,O),(0,O),...,(0,O),Jo) withdQ{qJ)=Oifq E QoHFj; doiqj) = lifqeQo\Fj and 
1 < bj; and dQ{q,j) = ± otherwise; and = G 2o I d{qj) ^ -i-for every j}. 

• We define the transition function 5 only for reachable states: 5(((5'o,mo), . . . , (S„,m„),<i),a) = 
{{SQ,m'Q),...,{S'„,m'^),d') where 

ifqGA{SQ,a)andq&Fj, 

,t, .^ \d{pJ) + \ ifqeA{So,a),q^Fj,andd{p,j) + l<bj, 

- d [q,j) = < 

± if q G A(5'o,a), q ^ Fj, and d{p,j) + 1 =bj, 

^-L ifq^A{SQ,a), 
where p is the unique (due to non-confiuence, see Lemma \20\li state in So with (p,a,q) G A. 
Define T = {q£Q\ d'{q,j) / J-for every j}. 

— For the update of the state sets consider the sequence (So, mo),. . . , {Sn,mn) as a list contain- 
ing tuples {S,m). Remark \19\2\ yields that there are at most n non-empty sets Si. First, we 
delete all elements of the list containing the empty set by moving the non-empty state sets to 
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the left, without changing their order. Then, we replace every 5; by A{Si,a) D T. Finally, we 
append the state set So CiF to the end of the list. Denote the length of the updated list by i. 



Now, we clean up states. For / = 0, — 1 do: ifSi\F is a subset o/Uf/=/_|_i Si' and Sj ^ 0, 
then set m\ = 1, otherwise m\ = 0. Now, if mi = 1, then remove the states contained in Si from 
every Si' with i' > /. As we have I <n+\, we can retranslate the updated list into a unique 
state tuple {{S^^m'^), . . . , (S'^jm^)) (if the list is too short, we pad it with (0,0) at the end). 

• To define c consider a reachable state q = {{So, mo),. . . , {S„,mn),d). Let e be the minimal i such 
that Si = and let m be the minimal i such that m, = 1. Note that e is always defined for reachable 
states (due to Remark [l9\2^ and that e ^m. We define 

'1 ife = 0, 

c{q) = < 2m ifm < e, 

2e—\ ifO <e <mor ifm undefined. 

Note that in the definition of 5, cleaning up the sets might introduce new empty sets in the middle of 
the list. Also, note that p in the definition of d' is only well defined when considering reachable states. 
To prove the correctness of this construction, we need some properties of the states of 

Remark 19. Let q' = {{So, mo),. . . , {Sn,m„),d) be a reachable state of^. 

L Si C So for every i. 

2. For every non-empty set Si there is a state qi € Si such that qi ^ 5,/ for every i' > /. 

3. So = {qeQ\ d{q, j) ^ ±for every j}. 

To improve readability, we say that a finite or infinite run p satisfies ^ = {{Fi,bi), . . . ,{Fk,bic)} 
2^ X N+, if for every j we have that every infix of p of length bj contains at least one state from Fj. Next, 
we show that d{q,j) counts the time since the unique simulated run of 21 ending in q has visited Fj. 

Lemma 20. Let q'oq'iq'-) ■■■ be the run of^i on woW\W2 • • • S T'*' with q[ = {{S'Q,mQ),. . . , {S'^,m'^),d'). 

L Ifqt € 5'-, then there exists a (unique) finite run qoq\ ■ ..qt of^ on wqWi . . .Wi-i that satisfies G. 

2. Let to < t\ be positions of ((o4\42 ■ ■ ■ '^^^ ^ range <i <n such that 

• mf = m'l = 1, 

• 5 ■ 7^ 0/or every t in the range to<t< t\, and 

• m'-i =0 and S*-, ^ (dfor every t in the range to<t<t\ and every i' < i. 

Then, every finite run qt^^ ■■■qt, of % on Wjq ■..w^-i satisfying qt € S'{ for every t in the range 
to<t <ti visits a state in F at least once. 

3. Let qoqiqi ■■■ be a run of^ on woWiW2 ■ ■ ■ that satisfies Then, we have qt € S^for every t. 

Proof. [T]) We show a stronger statement by induction over t: if qt ^ S'^ for some /, then there exists 
a finite run qoqi ■■■qt of 21 on wqWi . . . Wt-i that satisfies ^ and for every j in the range < j < k we 
have d'{qt,i) = min{f — t'\t'<t and g,/ G Fj} or (in case there is no such qft g Fj) we have d*{qt,j) = 
\qoq\ ■•■qt \ =t + 1. Uniqueness of the run is then implied by non-confluence of 21. 

Due to Remark [1911] it suffices to consider / = 0. The claim holds for f = by definition of q^. Now, 
let f > 0: as € 5q, there is a unique (due to non-confluence) state qt-i € S'q^ such that {qt-\,Wt-\,qt) € 
A. Applying the inductive hypothesis, we obtain a run qoq\ ■ ■ ■ qt-i of 21 on wowi . . . Wt-2 that satisfies ^ 
and d'^^{qt-i,j) = min{(f — I) — t' \ t' < t — I and q,' G Fj} or d'^^{qt-i,j) = \qoqi ■■■qt-i \ =(■ Fur- 
thermore, Remark [l 9 13 [ yields d'{qt,j) < bj. We consider two cases: if qt € Fj, then qoqi ■■■qt satisfies ^ 
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and we have d'{qt,j) = 0, by definition of d', wtiich is equal to mm{t — t'\t'<t and q,i E Fj}. Now, 
suppose qt ^ Fj. Then, we have d'^^ {qt-i,j) < bj — 1, since we have d'{qt,j) = d'^\qt-i,j) + 1 < bj 
by the definition of d' in case qt ^ Fj. We consider the two choices for the value of d'^^{qt-\J). If 
d'^ \qt-i,j)= min{ (f — l)—t'\t'<t — l and qt' £ Fj} < bj — I, then the suffix of qoqi ■ ■ ■ qt- 1 of length 
bj — I, contains a vertex from Fj. Thus, also the suffix of qoq\ ■■■qt of length bj contains a vertex from 
Fj and hence d'{qtj) = min{(f - 1) - f' | f' < f - 1 and <7,/ € f,} + 1 = min{f -t' \t' <t and q,i G f^} 
and qoq\ ■■■qt satisfies i^, since the induction hypothesis applies to every infix but the last one, which 
has a vertex from Fj. Otherwise, if d'^^{qt-\J) = \qoq\ ■ ■ -^r-i 1 = t <bj — \, then d'{qt,j) = t + 1 = 
\qoqi • • • I by definition of d'. Then, qoqi ■■■qt trivially satisfies ff, as it has no infix of length bj. 

[21) We assume g,, ^ F, since we are done otherwise. We have qtg ^ S[° for every /' > /, due to 
mf = I, which means all states from Sf are deleted from the sets Sf for every /' > /. Let t' in the range 
to<t' < t\ be the first position such that qt' € U"=i+i S'-i. Such a position exists, as we have m'l =1, which 
implies <7,, G 5-,' for some /' > /. Since 17,/ G s(,, either qti G A(5'j'^\ w,/_i) or qti G A(5q^\h','_i) flF. 
Thus, it suffices to derive a contradiction in the first case: g,/ G A(5'-,^',Wf/_i) implies the existence of 
a G 5^/^^ such that (/?, G A. We have p ^ qt'-y due to the minimality of the position t'. But 

then Lemma [201 1 1 vields two different runs of 21 from qo to qt' on wq • • • which gives the desired 
contradiction to the non-confluence of 21. 

[3]) Again, we show a stronger statement by induction over t: let ^0^1 ^2- •• be a run of 21 on 
wqWiWi . . . that satisfies ^. Then, for every t we have qt G Sq and for every j in the range 1 < j < 
we have d'{qt,j) = mm{t —t'\t'<t and qt' G fy} or (in case there is no such qt' G Fj) we have 
d*{qtj) = ko^i ■■•qt\ = t + 1. Note that this statement is only well-defined for a non-confluent au- 
tomaton. 

The induction start f = follows from the definition of q'^. Now, let f > 0: the induction hypothesis 
yields qt-\ G S'q^ and for every j in the range 1 < 7 < A: we have d'^^{qt-i,j) = mm{{t — \) —t' \ 
t' <t — I and qt' G Fj} or d'^'^{qt-\,j) = \qoqi ■ •■qt-\ \ = t. We consider two cases. If qt G Fj, then we 
have qt G 5q and d'{qt,j) = 0, which is equal to min{f — | < f and qt' G Fy} by definition of S'J, and 

Otherwise, if qt ^ F, then we have d'^^ {qt-i, j) < bj — I, by induction hypothesis and the fact that 
qoQi ■ ■ -qt-i satisfies t&. Due to Remark [19131 it suffices to show d'{qt,j) < bj. We consider the two 
choices for the value of d'^ ^ {qt- 1 , j) . If d'' {qt-i,j) = min{ {t — I) — t' \t' <t — I and qt' € Fj} < bj — I, 
then d'{qt,j) = min{(f - I) - 1' \ t' <t - \ and qt' G Fj} + 1 = min{f -t' \t' <t and qt' G F,} < bj. On 
the other hand, if d*^^{qt-i,j) = \qoqi ■ • -qt-il = ^ < ~ then d'{qt,j) =t+l = \qoqi ■■■qt\<bj. □ 

We are now able to prove the correctness of Construction [18] Our proof proceeds along the lines of 
the proof for the original construction without counters [H. 

Lemma 21. Let 21 = (2,r,^7o,A,F) be a non-confluent Biichi automaton, let {{F\,b\),. . . , {Fk^bk)} C 
2^ X N+, and let *p be the deterministic parity automaton obtained from Construction [TSj 

1. *p accepts w if and only if^ has an accepting run p onw such that every Fj is visited at least once 
in every infix of p of length bj. 



Proof. [U) Let q'Qq\q'2 ■■■ be an accepting run of *p on w, with q'f = ((5Q,niQ), . . . , Then, 
there exists a position to and an / such that c{q'f) = 2i for infinitely many t and c{qf) > 2i for every t > to. 
Thus, S'j, 7^ for every t > to and every /' < / and m\, = for every t >to and every /' < /. Since 5-^^ is 
a non-empty subset of A(5-, Wj) for every t > to, Konig's Lemma yields an infinite run qto']to+iQto+2 ■ ■ ■ 
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(not necessarily starting in an initial state) of 21 on WtgWtg+iWtg+2 ■ ■ ■ such that ^ S\ for every t > t^. 
Furthermore, there exists a finite ran of 21 on wq . . . w^^-i starting in an initial state and ending in qt^ due 
to Lemma l20lll These runs can be concatenated to an infinite run qoqiq2 ■■■ of 21 on w such that qf G Sq 
for every t. Hence, qoqiqi ■ ■ ■ satisfies 0' due to Lemma l20lll Let ?i < f2 < ^3 < • • • be the positions after 
to such that c{q[ ) = 2i, i.e., m- = 1. The run ^o^i^2 • • • is accepting due to Lemma [20121 as the run visits 
an accepting state in between any tg and ts+\, of which there are infinitely many. 

Now, let qoqiq2 ■■■ be an accepting ran of 21 on w that satisfies & and let 4{i(i\4i • • • be the ran of 
*P on w with 4 = (('^0)"Jo)' • • • ' We have q, € for every t due to Lemma [20131 Assume 

there are only finitely many t such that = 1. Then, there is a minimal index i\ such that an infinite 
suffix of qoqiq2 ... is tracked by 5,, and 5-/ ^ for every /' < i\ from some point onwards. This is due 
to the fact that for every t with qt ^ F the set SqCiF (which contains qt) is appended to the list of state 
sets. Furthermore, this set can be moved to the left (in case other sets are empty) only a finite number of 
times. Finally, if the state qt is deleted from this set, then there is a smaller set which tracks this ran, for 
which the same reasoning applies. Again, assume there are only finitely many t such that = 1. Then, 
there exists a minimal index 12 > ii such that an infinite suffix of qoqiq2 • • • is tracked by Si^ and S\, ^ 
for every /' < (2 from some point onwards. This can be iterated until we have that the sets 5^,_j track the 
suffix of qoq\q2 ■ ■ ■ and all smaller sets are always non-empty. But as 5'|,_j is in this situation always a 

singleton (see Remark [l9|2| ). it gets marked every time an accepting state is visited by qoqiqi Hence, 

the run of on w is accepting. 

[2]) Clear. □ 

The Lemmata [T6l [TTl and [2l] imply the existence of a deterministic parity automaton with the prop- 
erties required in Lemma [14] Hence, this finishes the proof of Theorem [lO] To compute a finite-state 
strategy reahzing the optimal value (witnessed by a valuation a) in a PLTLp game with winning condi- 
tion 9, one has to compute a deterministic parity automaton recognizing the co-words w satisfying (pa, 
as explained above Lemma [T4l Dually, in a PLTLg game with winning condition cp, one computes a 
deterministic parity automaton recognizing the ft)- words w satisfying -'(pa, which is then complemented 
by incrementing the priorities. This complement automaton is a memory stracture for the PLTLg game. 



5 Conclusion 

We presented 2EXPTIME-algorithms for computing optimal strategies in a PLTL game and to determine 
whether a given player wins with respect to some, infinitely many, or all variable valuations. The decision 
problems for PROMPT-LTL and PLTL (with the exception of the finiteness problem for PLTL) are 
decidable by solving a single LTL game of the same size. Hence, adding parameterized operators does 
not increase the asymptotic computational complexity of solving these games. Furthermore, even the 
optimization problems for unipolar games can be solved in doubly-exponential time, so they are of the 
same computational complexity as solving LTL games. However, it takes an exponential number of 
parity games to solve to determine an optimal strategy. It is open whether this can be improved. 

An interesting open question concerns the tradeoff between the size of a finite-state strategy and the 
quality of the bounds it is winning for. 
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